first: commit
Guillermo Pages
2 months ago
commit
50fbb2224e
@ -0,0 +1,122 @@
|
||||
db_backups/
|
||||
|
||||
# build
|
||||
build/
|
||||
build-test/
|
||||
# keys
|
||||
.keys/
|
||||
# vscode
|
||||
.vscode/
|
||||
# JWT
|
||||
*RS256.key*
|
||||
# nyc
|
||||
.nyc_output
|
||||
converage
|
||||
*.lcov
|
||||
# vim
|
||||
*.swp
|
||||
# Logs
|
||||
logs
|
||||
*.log
|
||||
npm-debug.log*
|
||||
yarn-debug.log*
|
||||
yarn-error.log*
|
||||
lerna-debug.log*
|
||||
|
||||
AuthKey_XSVS859WJA.p8
|
||||
|
||||
|
||||
.DS_Store
|
||||
|
||||
# Diagnostic reports (https://nodejs.org/api/report.html)
|
||||
report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
|
||||
|
||||
# Runtime data
|
||||
pids
|
||||
*.pid
|
||||
*.seed
|
||||
*.pid.lock
|
||||
|
||||
# Directory for instrumented libs generated by jscoverage/JSCover
|
||||
lib-cov
|
||||
|
||||
# Coverage directory used by tools like istanbul
|
||||
coverage
|
||||
*.lcov
|
||||
|
||||
# nyc test coverage
|
||||
.nyc_output
|
||||
|
||||
# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
|
||||
.grunt
|
||||
|
||||
# Bower dependency directory (https://bower.io/)
|
||||
bower_components
|
||||
|
||||
# node-waf configuration
|
||||
.lock-wscript
|
||||
|
||||
# Compiled binary addons (https://nodejs.org/api/addons.html)
|
||||
build/Release
|
||||
|
||||
# Dependency directories
|
||||
node_modules/
|
||||
jspm_packages/
|
||||
|
||||
# TypeScript v1 declaration files
|
||||
typings/
|
||||
|
||||
# TypeScript cache
|
||||
*.tsbuildinfo
|
||||
|
||||
# Optional npm cache directory
|
||||
.npm
|
||||
|
||||
# Optional eslint cache
|
||||
.eslintcache
|
||||
|
||||
# Optional REPL history
|
||||
.node_repl_history
|
||||
|
||||
# Output of 'npm pack'
|
||||
*.tgz
|
||||
|
||||
# Yarn Integrity file
|
||||
.yarn-integrity
|
||||
|
||||
# dotenv environment variables file
|
||||
.env
|
||||
.env.test
|
||||
.env.prod
|
||||
.env.auth
|
||||
.env.vault
|
||||
|
||||
# .pem files
|
||||
pk*.pem
|
||||
rsa*.pem
|
||||
|
||||
# parcel-bundler cache (https://parceljs.org/)
|
||||
.cache
|
||||
|
||||
# next.js build output
|
||||
.next
|
||||
|
||||
# nuxt.js build output
|
||||
.nuxt
|
||||
|
||||
# vuepress build output
|
||||
.vuepress/dist
|
||||
|
||||
# Serverless directories
|
||||
.serverless/
|
||||
|
||||
# FuseBox cache
|
||||
.fusebox/
|
||||
|
||||
# DynamoDB Local files
|
||||
.dynamodb/
|
||||
|
||||
# Elastic Beanstalk Files
|
||||
.elasticbeanstalk/*
|
||||
!.elasticbeanstalk/*.cfg.yml
|
||||
!.elasticbeanstalk/*.global.yml
|
||||
@ -0,0 +1,17 @@
|
||||
FROM node:20-alpine
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
# Install dependencies
|
||||
COPY package*.json ./
|
||||
RUN npm ci --only=production
|
||||
|
||||
# Copy source and build
|
||||
COPY . .
|
||||
RUN npm run build:prod
|
||||
|
||||
# Expose port
|
||||
EXPOSE 3700
|
||||
|
||||
# Start the application
|
||||
CMD ["node", "build/src/index.js"]
|
||||
@ -0,0 +1,16 @@
|
||||
FROM node:20-alpine
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
# Install dependencies
|
||||
COPY package*.json ./
|
||||
RUN npm install
|
||||
|
||||
# Copy source
|
||||
COPY . .
|
||||
|
||||
# Expose port
|
||||
EXPOSE 3700
|
||||
|
||||
# Development mode with hot reload
|
||||
CMD ["npm", "run", "dev"]
|
||||
@ -0,0 +1,180 @@
|
||||
# Quick Start Guide - playchoo-auth
|
||||
|
||||
## Prerequisites
|
||||
|
||||
1. **Redis** running locally or accessible
|
||||
2. **SwissOID client credentials** (client ID + secret)
|
||||
3. **Node.js 20+** installed
|
||||
|
||||
## Local Development Setup
|
||||
|
||||
### 1. Install Dependencies
|
||||
|
||||
```bash
|
||||
npm install
|
||||
```
|
||||
|
||||
### 2. Configure Environment
|
||||
|
||||
Copy `.env` and update with your values:
|
||||
|
||||
```bash
|
||||
cp .env .env.local
|
||||
# Edit .env.local with your SwissOID credentials
|
||||
```
|
||||
|
||||
### 3. Prepare the shared Redis instance
|
||||
|
||||
```bash
|
||||
# Ensure the shared network exists (no-op if it already does)
|
||||
docker network create playchoo_redis_network || true
|
||||
|
||||
# Start the Redis service from py-playchoo-api (or attach your own instance to the same network)
|
||||
(cd ../py-playchoo-api && docker compose -f docker-compose.dev.yml up redis)
|
||||
```
|
||||
|
||||
> If you run the Node service directly on your machine, set `REDIS_URL` to
|
||||
> `redis://localhost:6379`. Inside Docker the compose file rewrites it to
|
||||
> `redis://redis:6379` automatically.
|
||||
|
||||
### 4. Start the Auth Service
|
||||
|
||||
```bash
|
||||
npm run dev
|
||||
```
|
||||
|
||||
The service will start on `http://localhost:3700`.
|
||||
|
||||
### 5. Test the Endpoints
|
||||
|
||||
**Health Check**:
|
||||
```bash
|
||||
curl http://localhost:3700/healthz
|
||||
```
|
||||
|
||||
**Auth Status** (should return unauthenticated):
|
||||
```bash
|
||||
curl http://localhost:3700/auth/status
|
||||
```
|
||||
|
||||
**Login** (open in browser):
|
||||
```
|
||||
http://localhost:3700/login
|
||||
```
|
||||
|
||||
This will redirect to SwissOID, and after login, redirect back to your `RP_FRONTEND_URL`.
|
||||
|
||||
## Production Deployment
|
||||
|
||||
### 1. Build the Application
|
||||
|
||||
```bash
|
||||
npm run build:prod
|
||||
```
|
||||
|
||||
### 2. Update Production Environment
|
||||
|
||||
```bash
|
||||
cp .env.prod .env.prod.local
|
||||
# Edit .env.prod.local with production values
|
||||
```
|
||||
|
||||
### 3. Deploy with Docker
|
||||
|
||||
```bash
|
||||
docker-compose up -d
|
||||
```
|
||||
|
||||
## Verify Integration
|
||||
|
||||
### Check Session Storage
|
||||
|
||||
After logging in, check Redis for your session:
|
||||
|
||||
```bash
|
||||
# Connect to Redis
|
||||
redis-cli
|
||||
|
||||
# List all session keys
|
||||
KEYS session:*
|
||||
|
||||
# View a specific session
|
||||
GET session:<your-session-id>
|
||||
```
|
||||
|
||||
You should see JSON like:
|
||||
```json
|
||||
{
|
||||
"sub": "user-uuid-from-swissoid",
|
||||
"email": "user@example.com",
|
||||
"iat": 1234567890,
|
||||
"exp": 1234575090
|
||||
}
|
||||
```
|
||||
|
||||
### Test Cookie Setting
|
||||
|
||||
Use browser DevTools:
|
||||
1. Open Network tab
|
||||
2. Visit `http://localhost:3700/login`
|
||||
3. Complete SwissOID flow
|
||||
4. Check Application → Cookies
|
||||
5. Verify `playchoo_session` cookie is set with:
|
||||
- Domain: `.playchoo.com` (or `localhost` in dev)
|
||||
- Secure: `true` (in production)
|
||||
- HttpOnly: `true`
|
||||
- SameSite: `None` (or `Lax`)
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
### "Session not found" in API
|
||||
|
||||
- Verify Redis is running: `redis-cli ping`
|
||||
- Check cookie name matches in both services: `SESSION_COOKIE_NAME`
|
||||
- Ensure `REDIS_URL` is the same in auth service and API
|
||||
|
||||
### SwissOID callback fails
|
||||
|
||||
- Verify `OIDC_REDIRECT_BASE_URL` matches your registered redirect URI
|
||||
- Check SwissOID client is configured for `authorization_code` flow
|
||||
- Ensure `SWISSOID_CLIENT_SECRET` is correct
|
||||
|
||||
### Cookie not set
|
||||
|
||||
- Check `RP_COOKIE_DOMAIN` matches your domain structure
|
||||
- For localhost, use `localhost` (no leading dot)
|
||||
- For production, use `.playchoo.com` (with leading dot)
|
||||
- Verify `CORS_ALLOWED_ORIGIN` includes your frontend URL
|
||||
|
||||
### CORS errors
|
||||
|
||||
- Add frontend URL to `CORS_ALLOWED_ORIGIN`
|
||||
- Ensure frontend uses `credentials: 'include'` in fetch
|
||||
- Check browser console for specific CORS error
|
||||
|
||||
## Environment Variables Reference
|
||||
|
||||
| Variable | Description | Example |
|
||||
|----------|-------------|---------|
|
||||
| `SWISSOID_CLIENT_ID` | SwissOID client identifier | `playchoo` |
|
||||
| `SWISSOID_CLIENT_SECRET` | SwissOID client secret | `<secret>` |
|
||||
| `SESSION_COOKIE_NAME` | Name of session cookie | `playchoo_session` |
|
||||
| `SESSION_TTL` | Session lifetime (seconds) | `7200` (2 hours) |
|
||||
| `REDIS_URL` | Redis connection string | `redis://redis:6379` |
|
||||
| `RP_FRONTEND_URL` | Frontend redirect after login | `https://app.playchoo.com` |
|
||||
| `RP_COOKIE_DOMAIN` | Cookie domain | `.playchoo.com` |
|
||||
|
||||
## Next Steps
|
||||
|
||||
1. **Integrate with py-playchoo-api**: See `/py-playchoo-api/README.md`
|
||||
2. **Update Frontend**: Install `swissoid-front` and configure provider
|
||||
3. **Configure Production Secrets**: Use a secrets manager for sensitive values
|
||||
4. **Set up Monitoring**: Add alerts for Redis health, auth failures
|
||||
5. **Test End-to-End**: Complete login flow from frontend → auth → API
|
||||
|
||||
## Support
|
||||
|
||||
For issues or questions, check:
|
||||
- [swissoid-back README](../swissoid-back/README.md)
|
||||
- [Integration Summary](../SWISSOID_INTEGRATION_SUMMARY.md)
|
||||
- SwissOID documentation
|
||||
@ -0,0 +1,122 @@
|
||||
# playchoo-auth
|
||||
|
||||
SwissOID authentication service for Playchoo. Manages OIDC login flow, session storage in Redis, and provides authentication endpoints for the Playchoo stack.
|
||||
|
||||
## Architecture
|
||||
|
||||
- **SwissOID Integration**: Uses `swissoid-back` for OIDC authorization code flow
|
||||
- **Session Storage**: Redis-backed sessions with HttpOnly cookies
|
||||
- **Shared Sessions**: `api.playchoo.com` and `app.playchoo.com` share session state via Redis
|
||||
|
||||
## Endpoints
|
||||
|
||||
- `GET /login` - Initiates SwissOID OIDC flow
|
||||
- `POST /oidc/callback` - Handles SwissOID callback
|
||||
- `GET /auth/status` - Returns current authentication status
|
||||
- `POST /auth/logout` - Destroys session
|
||||
- `GET /healthz` - Health check
|
||||
|
||||
## Environment Variables
|
||||
|
||||
```env
|
||||
# SwissOID Configuration
|
||||
SWISSOID_CLIENT_ID=playchoo
|
||||
SWISSOID_CLIENT_SECRET=<your-secret>
|
||||
SWISSOID_ISSUER=https://api.swissoid.com
|
||||
SWISSOID_JWKS_URI=https://api.swissoid.com/.well-known/jwks.json
|
||||
SWISSOID_TOKEN_ENDPOINT=https://api.swissoid.com/token
|
||||
SWISSOID_AUTHORIZE_ENDPOINT=https://api.swissoid.com/authorize
|
||||
|
||||
# Session Configuration
|
||||
SESSION_COOKIE_NAME=playchoo_session
|
||||
REFRESH_COOKIE_NAME=playchoo_refresh
|
||||
SESSION_SECRET=<generate-random-secret>
|
||||
STATE_SIGNING_SECRET=<generate-random-secret>
|
||||
SESSION_TTL=7200
|
||||
REFRESH_TTL=604800
|
||||
|
||||
# Redis (shared with py-playchoo-api)
|
||||
REDIS_URL=redis://redis:6379
|
||||
|
||||
# RP Configuration
|
||||
OIDC_REDIRECT_BASE_URL=https://auth.playchoo.com
|
||||
RP_FRONTEND_URL=https://app.playchoo.com
|
||||
RP_COOKIE_DOMAIN=.playchoo.com
|
||||
POST_LOGIN_PATH=/dashboard
|
||||
```
|
||||
|
||||
> When running the service directly on your host (outside Docker), override
|
||||
> `REDIS_URL` to `redis://localhost:6379`. The Docker Compose files remap it to
|
||||
> `redis://redis:6379` so the container can reach the shared Redis service.
|
||||
|
||||
## Local Development
|
||||
|
||||
```bash
|
||||
npm install
|
||||
|
||||
# Ensure the shared Redis network exists (run once)
|
||||
docker network create playchoo_redis_network || true
|
||||
|
||||
# Start the Redis service from py-playchoo-api (or attach your own instance to the same network)
|
||||
(cd ../py-playchoo-api && docker compose -f docker-compose.dev.yml up redis)
|
||||
|
||||
# In a new terminal, start the auth service
|
||||
npm run dev
|
||||
```
|
||||
|
||||
The service will start on `http://localhost:3700` and will reuse the Redis
|
||||
container from `py-playchoo-api` through the `playchoo_redis_network` network.
|
||||
|
||||
## Docker
|
||||
|
||||
```bash
|
||||
# Development
|
||||
docker-compose -f docker-compose.dev.yml up
|
||||
|
||||
# Production
|
||||
docker-compose up
|
||||
```
|
||||
|
||||
## Session Format
|
||||
|
||||
Sessions stored in Redis under key `session:<sessionId>`:
|
||||
|
||||
```json
|
||||
{
|
||||
"sub": "user-uuid-from-swissoid",
|
||||
"email": "user@example.com",
|
||||
"iat": 1234567890,
|
||||
"exp": 1234575090
|
||||
}
|
||||
```
|
||||
|
||||
## Integration
|
||||
|
||||
### Python API (py-playchoo-api)
|
||||
|
||||
The Python API reads sessions from the same Redis instance:
|
||||
|
||||
```python
|
||||
# Retrieve session from cookie
|
||||
session_id = request.cookies.get('playchoo_session')
|
||||
session_data = redis_client.get(f'session:{session_id}')
|
||||
user_uuid = json.loads(session_data)['sub']
|
||||
```
|
||||
|
||||
### Frontend (playchoo-nextjs)
|
||||
|
||||
Uses `swissoid-front` React provider:
|
||||
|
||||
```tsx
|
||||
import { SwissOIDAuthProvider } from 'swissoid-front';
|
||||
|
||||
<SwissOIDAuthProvider baseUrl="https://auth.playchoo.com">
|
||||
<App />
|
||||
</SwissOIDAuthProvider>
|
||||
```
|
||||
|
||||
## Related Documentation
|
||||
|
||||
- [`swissoid-back` README](../swissoid-back/README.md) - OIDC backend integration
|
||||
- [`swissoid-front` README](../swissoid-front/README.md) - React frontend helpers
|
||||
- [Playchoo API README](../py-playchoo-api/README.md) - Session lookup implementation
|
||||
@ -0,0 +1,26 @@
|
||||
version: '3.8'
|
||||
|
||||
services:
|
||||
playchoo-auth:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: Dockerfile.dev
|
||||
ports:
|
||||
- "3700:3700"
|
||||
environment:
|
||||
- NODE_ENV=development
|
||||
- APP_PORT=3700
|
||||
- REDIS_URL=${REDIS_URL:-redis://redis:6379}
|
||||
env_file:
|
||||
- .env
|
||||
volumes:
|
||||
- .:/app
|
||||
- /app/node_modules
|
||||
networks:
|
||||
- playchoo_redis_network
|
||||
command: npm run dev
|
||||
|
||||
networks:
|
||||
playchoo_redis_network:
|
||||
name: playchoo_redis_network
|
||||
external: true
|
||||
@ -0,0 +1,42 @@
|
||||
version: '3.8'
|
||||
|
||||
services:
|
||||
playchoo-auth:
|
||||
build: .
|
||||
ports:
|
||||
- "3700:3700"
|
||||
env_file:
|
||||
- .env.prod
|
||||
environment:
|
||||
NODE_ENV: ${NODE_ENV:-production}
|
||||
APP_PORT: ${APP_PORT:-3700}
|
||||
APPLICATION_NAME: ${APPLICATION_NAME:-Playchoo Auth}
|
||||
CORS_ALLOWED_ORIGIN: ${CORS_ALLOWED_ORIGIN}
|
||||
SWISSOID_CLIENT_ID: ${SWISSOID_CLIENT_ID}
|
||||
SWISSOID_CLIENT_SECRET: ${SWISSOID_CLIENT_SECRET}
|
||||
SWISSOID_ISSUER: ${SWISSOID_ISSUER}
|
||||
SWISSOID_JWKS_URI: ${SWISSOID_JWKS_URI}
|
||||
SWISSOID_TOKEN_ENDPOINT: ${SWISSOID_TOKEN_ENDPOINT}
|
||||
SWISSOID_AUTHORIZE_ENDPOINT: ${SWISSOID_AUTHORIZE_ENDPOINT}
|
||||
REDIS_URL: ${REDIS_URL}
|
||||
SESSION_COOKIE_NAME: ${SESSION_COOKIE_NAME:-playchoo_session}
|
||||
REFRESH_COOKIE_NAME: ${REFRESH_COOKIE_NAME:-playchoo_refresh}
|
||||
SESSION_SECRET: ${SESSION_SECRET}
|
||||
STATE_SIGNING_SECRET: ${STATE_SIGNING_SECRET}
|
||||
SESSION_TTL: ${SESSION_TTL:-7200}
|
||||
REFRESH_TTL: ${REFRESH_TTL:-604800}
|
||||
OIDC_REDIRECT_BASE_URL: ${OIDC_REDIRECT_BASE_URL}
|
||||
RP_FRONTEND_URL: ${RP_FRONTEND_URL}
|
||||
RP_COOKIE_DOMAIN: ${RP_COOKIE_DOMAIN}
|
||||
POST_LOGIN_PATH: ${POST_LOGIN_PATH:-/dashboard}
|
||||
ALLOW_CONTINUE_PARAM: ${ALLOW_CONTINUE_PARAM:-true}
|
||||
LOGGER_LOG: ${LOGGER_LOG:-1}
|
||||
LOGGER_DEBUG: ${LOGGER_DEBUG:-0}
|
||||
networks:
|
||||
- playchoo_redis_network
|
||||
restart: unless-stopped
|
||||
|
||||
networks:
|
||||
playchoo_redis_network:
|
||||
name: playchoo_redis_network
|
||||
external: true
|
||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,31 @@
|
||||
{
|
||||
"name": "playchoo-auth",
|
||||
"version": "1.0.0",
|
||||
"description": "SwissOID authentication service for Playchoo",
|
||||
"main": "build/src/index.js",
|
||||
"type": "commonjs",
|
||||
"scripts": {
|
||||
"build": "tsc",
|
||||
"build:prod": "tsc",
|
||||
"start": "node build/src/index.js",
|
||||
"dev": "ts-node src/index.ts",
|
||||
"test": "echo \"Error: no test specified\" && exit 1"
|
||||
},
|
||||
"keywords": ["swissoid", "auth", "oidc"],
|
||||
"author": "",
|
||||
"license": "ISC",
|
||||
"dependencies": {
|
||||
"di-why": "^0.20.1",
|
||||
"express": "^5.1.0",
|
||||
"express-knifey": "^1.1.3",
|
||||
"ioredis": "^5.8.1",
|
||||
"swissoid-back": "^2.2.5",
|
||||
"swiss-army-knifey": "^1.36.4"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@types/express": "^4.17.21",
|
||||
"@types/node": "^20.11.0",
|
||||
"ts-node": "^10.9.2",
|
||||
"typescript": "^5.3.3"
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,36 @@
|
||||
import { isMeantToBeTrue, UnknownEnv } from 'swiss-army-knifey';
|
||||
|
||||
type Env = UnknownEnv & {
|
||||
APPLICATION_NAME?: string;
|
||||
APP_PORT?: string;
|
||||
NODE_ENV?: string;
|
||||
CORS_ALLOWED_ORIGIN?: string;
|
||||
CORS_CREDENTIALS?: string;
|
||||
COOKIE_DOMAIN?: string;
|
||||
SECURE_COOKIES?: string;
|
||||
TRUST_PROXY?: string;
|
||||
};
|
||||
|
||||
const appConfigMap = (env: Env) => ({
|
||||
applicationName: env.APPLICATION_NAME || 'Playchoo Auth',
|
||||
serverPort: (env.APP_PORT !== undefined && parseInt(env.APP_PORT, 10)) || 3700,
|
||||
nodeEnv: env.NODE_ENV || 'development',
|
||||
|
||||
corsAllowedOrigin: env.CORS_ALLOWED_ORIGIN || 'http://localhost:3000',
|
||||
corsCredentials:
|
||||
env.CORS_CREDENTIALS !== undefined
|
||||
? isMeantToBeTrue(env.CORS_CREDENTIALS)
|
||||
: true,
|
||||
|
||||
cookieDomain: env.COOKIE_DOMAIN,
|
||||
secureCookies:
|
||||
env.SECURE_COOKIES !== undefined
|
||||
? isMeantToBeTrue(env.SECURE_COOKIES)
|
||||
: env.NODE_ENV === 'production',
|
||||
|
||||
trustProxy: env.TRUST_PROXY || '1',
|
||||
healthCheckPath: '/healthz',
|
||||
healthCheckResponse: 'ok',
|
||||
});
|
||||
|
||||
export default appConfigMap;
|
||||
@ -0,0 +1,30 @@
|
||||
import 'dotenv/config';
|
||||
import DiContainer from 'di-why/build/src/DiContainer';
|
||||
import appConfigMap from './config/appConfigMap';
|
||||
import { loadDict } from './loaders';
|
||||
|
||||
async function bootstrap() {
|
||||
console.log('[Bootstrap] Starting Playchoo Auth Service...');
|
||||
|
||||
// Create DI container with all loaders
|
||||
const diContainer = new DiContainer({
|
||||
load: {
|
||||
...loadDict,
|
||||
// Override appConfig with our custom config
|
||||
appConfig: {
|
||||
factory: () => appConfigMap(process.env),
|
||||
locateDeps: {},
|
||||
},
|
||||
},
|
||||
});
|
||||
|
||||
// Start the Express server (includes all middleware, OIDC routes, health checks)
|
||||
await diContainer.load('expressLauncher');
|
||||
|
||||
console.log('[Bootstrap] Playchoo Auth Service started successfully');
|
||||
}
|
||||
|
||||
bootstrap().catch((error) => {
|
||||
console.error('[Bootstrap] Failed to start Playchoo Auth Service:', error);
|
||||
process.exit(1);
|
||||
});
|
||||
@ -0,0 +1,45 @@
|
||||
import { mergeLDs } from 'di-why';
|
||||
import expressLoadDict, {
|
||||
EXPRESS_MIDDLEWARE,
|
||||
buildMiddlewareConfig,
|
||||
} from 'express-knifey';
|
||||
import type { MiddlewareConfig, MiddlewarePathConfig } from 'express-knifey';
|
||||
import { swissoidAuthLoadDict } from 'swissoid-back';
|
||||
|
||||
const middlewareConfig: MiddlewarePathConfig = buildMiddlewareConfig([
|
||||
{
|
||||
path: '*',
|
||||
middleware: [
|
||||
EXPRESS_MIDDLEWARE.trustProxy,
|
||||
EXPRESS_MIDDLEWARE.cors,
|
||||
EXPRESS_MIDDLEWARE.cookieParser,
|
||||
EXPRESS_MIDDLEWARE.bodyParser,
|
||||
EXPRESS_MIDDLEWARE.urlencoded,
|
||||
],
|
||||
},
|
||||
{
|
||||
path: EXPRESS_MIDDLEWARE.healthCheck.defaultPath ?? '/healthz',
|
||||
middleware: [EXPRESS_MIDDLEWARE.healthCheck],
|
||||
},
|
||||
]);
|
||||
|
||||
const globalPath = '*';
|
||||
const enhancedGlobal: MiddlewareConfig[] = [
|
||||
...(middlewareConfig[globalPath] ?? []),
|
||||
{ name: 'oidcStandardRoutesMiddleware', priority: 60 },
|
||||
];
|
||||
|
||||
middlewareConfig[globalPath] = enhancedGlobal;
|
||||
|
||||
export const loadDict = mergeLDs(
|
||||
expressLoadDict,
|
||||
swissoidAuthLoadDict,
|
||||
{
|
||||
middlewareConfig: {
|
||||
factory: () => middlewareConfig,
|
||||
locateDeps: {},
|
||||
},
|
||||
}
|
||||
);
|
||||
|
||||
export default loadDict;
|
||||
@ -0,0 +1,20 @@
|
||||
{
|
||||
"compilerOptions": {
|
||||
"target": "ES2020",
|
||||
"module": "commonjs",
|
||||
"lib": ["ES2020"],
|
||||
"outDir": "./build",
|
||||
"rootDir": "./",
|
||||
"strict": true,
|
||||
"esModuleInterop": true,
|
||||
"skipLibCheck": true,
|
||||
"forceConsistentCasingInFileNames": true,
|
||||
"resolveJsonModule": true,
|
||||
"declaration": true,
|
||||
"declarationMap": true,
|
||||
"sourceMap": true,
|
||||
"moduleResolution": "node"
|
||||
},
|
||||
"include": ["src/**/*"],
|
||||
"exclude": ["node_modules", "build"]
|
||||
}
|
||||
Loading…
Reference in New Issue